The router that is the end point of the virtual link does indeed have an
interface in area 0 - that's where the virtual link terminates!!

so yes, the virtual link has to authenticate to area zero, same as if it
were directly connected.

Chuck

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Hollis
Sent: Sunday, October 28, 2001 8:16 PM
To: [EMAIL PROTECTED]
Subject: OSPF Authentication with Virtual Links [7:24457]


Ran into following during a lab scenario, but can't find any documentation
on this. Can someone please verify if this is correct?

With md5 authentication configured in OSPF Area 0, following must also be
configured on ABR with virtual link... (the ABR which is not directly
connected to Area 0.) "area 0 authentication message-digest".  Note that
Router A does not have any interfaces actually in Area 0.

Router A..................
router ospf 110
 log-adjacency-changes
 area 0 authentication message-digest  (??????)
 area 1 virtual-link 192.168.5.5
 network 172.16.4.0 0.0.0.255 area 1
 network 172.16.12.0 0.0.0.255 area 3

Router B...............
interface Serial0.504 point-to-point
 ip address 172.16.1.1 255.255.255.0
 ip ospf message-digest-key 4 md5 mypassword
 frame-relay interface-dlci 504
!
router ospf 110
 log-adjacency-changes
 area 0 authentication message-digest
 area 1 virtual-link 192.168.2.2
 network 172.16.1.0 0.0.0.255 area 0
 network 172.16.5.0 0.0.0.255 area 1




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=24464&t=24457
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to